How to deploy Microsoft LAPS using SCCM

In this short post we will see how to deploy Microsoft LAPS using SCCM. Microsoft LAPS can be deployed using various methods, one among them is using the Configuration Manager or SCCM. The Local Administrator Password Solution (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset. In my previous posts on Microsoft LAPS, we deployed the LAPS software using Group Policy. In this post we will deploy Microsoft LAPS using Configuration Manager. If you are looking for LAPS step by step guides, you can access the posts by clicking on the below links.

Provide a name to the deployment type and ensure the installation program is same as seen in the screenshot below. Click Next.

I have not specified any Requirements and dependencies for this app. So click Next and finally on the completion page click on Close.

So we have just imported the x64 msi. The next step is to import LAPS x86 msi file. Click on Add. You need to repeat the same steps as shown above to import the LAPS x86 msi file.

Once you import the LAPS x86, you will see both the msi files. Click Next.

On the completion screen, click on Close.

The next step is to distribute the LAPS to the distribution points. Right click on the app and click distribute content and choose the DP’s that you want to distribute the content. Once the content is available with the DP, right click on the app and click on Deploy. Choose the collection to which you want to deploy the app (Available or Required). In this example I have made the app Available to a device collection. On the client machine, launch the software center and under Applications click on Install to install the Microsoft Local Administrator Password Solution.

The installation is very quick and within few seconds you will find the LAPS installed on the computer. To verify the LAPS installation, launch the control panel and click on Programs and Features. If the installation is successful you will find the LAPS entry in the list of installed programs in Programs and Features.

Note – The uninstall command and detection methods are automatically added when you import the msi file. The uninstall option should also work fine. In case of install errors look for appenforce.log file for troubleshooting.